diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml new file mode 100644 index 00000000..5dd10854 --- /dev/null +++ b/.github/workflows/compliance.yml @@ -0,0 +1,22 @@ +name: Compliance + +on: + pull_request: + branches: [ main ] + +permissions: + contents: read + +jobs: + compliance: + runs-on: ubuntu-latest + steps: + - name: ⬇️ Checkout + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + - name: Plumber + uses: outscale/.github/pipeline-compliance@f4952618256a12ea89d93ba7105866b80bd62266 # v1.0.0 + with: + plumber-threshold: 100 + github-token: ${{ secrets.PLUMBER_TOKEN }} diff --git a/.github/workflows/cred-scan.yml b/.github/workflows/cred-scan.yml deleted file mode 100644 index 379e37d1..00000000 --- a/.github/workflows/cred-scan.yml +++ /dev/null @@ -1,18 +0,0 @@ -name: Credential Scanner - -on: - pull_request: - branches: [ main ] - -permissions: - contents: read - -jobs: - cred-scan: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - - name: Scan credentials - uses: outscale/cred-scan@main - with: - scan_path: "./" diff --git a/.github/workflows/github-sanity-scan.yml b/.github/workflows/github-sanity-scan.yml deleted file mode 100644 index 9287ef02..00000000 --- a/.github/workflows/github-sanity-scan.yml +++ /dev/null @@ -1,18 +0,0 @@ -name: Github sanity scanner - -on: - pull_request: - branches: [ main ] - -permissions: - contents: read - -jobs: - github-sanity-scan: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - - name: Github sanity scanner - uses: outscale/github-sanity-scan@main - with: - no-pull-request-target: true diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml deleted file mode 100644 index 1acfaf58..00000000 --- a/.github/workflows/sync-labels.yml +++ /dev/null @@ -1,16 +0,0 @@ -name: Sync labels -on: - workflow_dispatch: - -permissions: - issues: write # needed to edit labels - -jobs: - sync: - runs-on: ubuntu-latest - steps: - - uses: EndBug/label-sync@52074158190acb45f3077f9099fea818aa43f97a # v2 - with: - config-file: 'https://raw.githubusercontent.com/outscale/.github/main/labels.yml' - # delete-other-labels: false # set to true for strict sync - # dry-run: false # set to true to preview changes